Skip to content

Transferability of Evasion and Backdoor Attacks in Encrypted Domain

Aug 2026 · Journal of Hardware and Systems Security · Vol 10 · 0 citations · 35 references
Computer Science

TL;DR

It is demonstrated that FHE-enabled models remain susceptible to both evasion and backdoor attacks, underscoring the need for stronger defenses in encrypted ML systems.

View source

Similar papers

Review Open access 2026

Privacy and Security in Knowledge Distillation for Federated Learning: A Survey

Knowledge distillation (KD) is increasingly used in federated learning (FL) because it enables clients to exchange predictions, features, prototypes, or synthetic knowledge rather than full model parameters. This change can reduce communication and support heterogeneous models, but it also changes the privacy and secur...

Hamza Reguieg, Essaid Sabir, M. El Kamili · 0 citations
Conference Jul 2026

Rethinking the Transferable Adversarial Attacks and Robust Defense in Federated Learning

To mitigate the attacks of transferable adversarial examples, a defense mechanism stemming from the transferability of model robustness by adversarial training is designed, gaining insights into adversarial examples and the vulnerability of federated learning systems.

Zuobin Xiong, Deval Mukherjee, Homook Cho et al. · 0 citations
Conference Aug 2026

Privacy-Preserving Robust Federated Learning Based on Threshold Homomorphic Encryption

Federated learning (FL) enables collaborative model training without sharing raw data, but remains vulnerable to Byzantine attacks and privacy leakage. Existing privacy-preserving robust FL schemes suffer from prohibitive computation and communication overheads, particularly on resourceconstrained clients. To address t...

Qing-Lan Zhao, Zhou-Peng Feng, Mei-Ling Zhang et al. · 0 citations
Preprint Aug 2026

BackDFL: A Unified Benchmark For Backdoor Attacks and Defenses In Decentralized Federated Learning

BackDFL is presented, a unified benchmark for systematically evaluating DFL under realistic and adaptive backdoor attacks, and demonstrates that both state-of-the-art Byzantine-robust DFL methods and adapted FL backdoor defenses fail under modest malicious participation rates, especially in heterogeneous settings.

M. Bouchiha, Gregory Blanc, Yu-Fei Han · 0 citations

We use cookies to run the site and, with your consent, for analytics and to show ads. See our Cookie Policy.